Merge pull request #154 from zh54321/patch-1

Additional regex in KeepPassOrKeyInCode.toml
SnaffCon · Oct 15, 2024 · 02c7410 · 02c7410
2 parents 36903dc + e938f60
commit 02c7410
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/Snaffler/SnaffRules/DefaultRules/FileRules/Keep/Code/KeepPassOrKeyInCode.toml b/Snaffler/SnaffRules/DefaultRules/FileRules/Keep/Code/KeepPassOrKeyInCode.toml
@@ -10,6 +10,7 @@ WordList = ["passw?o?r?d\\s*=\\s*[\\'\\\"][^\\'\\\"]....",
 "api[Kk]ey\\s*=\\s*[\\'\\\"][^\\'\\\"]....",
 "passw?o?r?d?>\\s*[^\\s<]+\\s*<",
 "passw?o?r?d?>.{3,2000}</pass",
+"-passw?o?r?d?",
 "api[kK]ey>\\s*[^\\s<]+\\s*<",
 "[_\\-\\.]oauth\\s*=\\s*[\\'\\\"][^\\'\\\"]....",
 "client_secret\\s*=*\\s*",